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£H Abstract 

1—3 We introduce a general approach for the analysis of a quantum direct communication 

protocol. The method is based on the investigation of the superoperator acting on a joint 
p<| system of the communicating parties and the eavesdropper. The introduced method is more 

versatile than the approaches used so far as it permits to incorporate different noise models 
in a unified way. Moreover, it make use of a well grounded theory of quantum discrimination 
for the purpose of estimating the eavesdropper's information gain. 
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qh 1 Introduction 

I One of the main objectives of quantum information theory |10j is to develop new protocols 

for controlling the networks of quantum processing units connected by quantum channels [7]. 
This type of networks requires new methods allowing full utilization of the capabilities offered 
^ by quantum information processing [12] . Quantum internetworking protocols should be able to 

exploit the quantum effects, including quantum teleportation, dense coding and quantum direct 
communication. However, in order to provide efficient methods for the utilization of quantum 
effects in large scale networks, it is necessary to analyze the robustness of quantum information 
processing against the errors that occur during the transmission [8] and processing of quantum 
information [5]. 

In this paper we focus on the analysis of the security of quantum ping-pong protocol in 
the presence of a general form of quantum noise. The ping-pong protocol [2] has attracted a 
lot of attention as, contrary to quantum key distribution (QKD) schemes, it does not require 
prior key agreement for confidentiality provision and it is provably asymptotically secure in 
lossless channels. The theoretical success of the protocol has been closely followed by the 
experimental implementation and the proof of concept installation has been realized in the 
laboratory |11| . It has also been shown that the protocol variant based on higher dimensional 
systems and exploiting dense information coding also share features of the seminal version when 
some improvements are introduced |131 [JS] . 

The ping-pong protocol, similarly to other quantum direct communication (QDC) protocols, 
operates in two modes: a message mode is designed for information transfer and a control mode 
is used for an eavesdropping detection. Although the ping-pong protocol is asymptotically 
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secure in perfect quantum channels, the situation looks worse in noisy environments when 
legitimate users tolerate some level of transmission errors and/or losses. If that level is too high 
compared to the quality of the channel then an eavesdropper can peek some fraction of signal 
particles hiding himself behind accepted quantum bit error rate (QBER) threshold I17j . 
Thus the possibility to intercept some part of the message without being detected renders the 
protocol insecurity. To cope with this problem an additional purely classical layer has been 
proposed [15]. However the estimation of security improvement offered by that layer heavily 
depends on observed QBER and the methods of the protocol analysis used so far do not offer 
mathematical apparatus capable of QBER estimation in noisy channels. The purpose of the 
presented work is to fill in this gap. 

This paper is organized as follows. In Section [2] we provide a general description of the 
ping-pong protocol in the language of density operators. In Section [3] we describe a general 
model of noise which can be used to describe the errors occurring during the execution of the 
protocol. In Section [4] we apply the introduced description for the purpose of the security in 
the passive eavesdropping scenario. Finally, in Section [5] we summarize the presented work and 
provide concluding remarks. 



2 General description of the ping-pong protocol 

Let us consider the seminal version of the ping-pong protocol [2] in which the message and 
control modes are executed only in computational basis. The communication process is started 
by Bob, the recipient of information, who prepares an EPR pair 

\0 + ) = (\Ob)\Oa) + \Ib)\Ia))/V^ . (1) 

At the same time eavesdropping Eve controls her own system, which is initially described by 
state \xe)- As the states of Bob and Eve are separated, the density matrix of the whole system 
16 cids 

P { BAE = P { BA® pf = \^ + ){^\®\XE){XE\ ■ (2) 

Next Bob sends a signal qubit A to Alice. This qubit on its way can be influenced by two 
factors: quantum noise because of channel imperfection and malicious activities of Eve who 
may entangle it with the system controlled by herself. 

Let us assume that Eve is positioned close to Alice, so her action takes place on the qubit 
modified by the noise. The density matrix of the system just before signal qubit enters the 
environment controlled by Alice reads 

P [ b\e = {Nba ® Is) (pf A ® Pf) = P { b\ ® Pf . (3) 

where it has been explicitly highlighted that noise operator M acts only on the EPR pair (I 
denotes identity operation). Before signal qubit enters Alice's environment, Eve can entangle 
it with her own system 

P { b ) ae = ^b®£ae)p { b ) ae , (4) 

where entangling operator £ae ac ts only on qubit A of the EPR pair and system possessed 
by Eve. At that point of protocol execution Alice can select a control mode which serves for 
eavesdropping detection or continue in the information mode. 

In the former case she measures the received qubit in computational basis, i.e. performs von 
Neumann measurement using projectors M Xf A =%b® \xa){%a\ ®Ie, a? = 0, 1. The probability 
that she finds qubit under investigation in state \x) (measures ±1) is given by 

p A {x)=Tr(p%\ E M x ^ (5) 
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After the measurement the state of the whole system is described by 



(2) _ M xA p%\ E M xA 

C BAE — ( (o\ \ • W 

TV (pf AE M xA 



Subsequently Bob measures his qubit in computational basis using projectors M y<B = \yB){yB\® 
X A ®X b , y = 0,1. The probability that Bob finds his qubit in state \y) provided that Alice has 
found his qubit in state \x) is given by 

p BlA (y\x) = Tr(a x ( i ) AE M y>B y (7) 

From the above, it follows that errors in control mode appear with probability 

Pec = Pb\a (MO) p A (0)+ PBlA (0\1) PA (1) ■ (8) 

In information mode, Alice encodes a classic bit p applying (p = 1) or not (p = 0) operator 
Za to the possessed qubit. The system state after encoding is given by 

Pvbae = ( Z b ® Z\ ® X E ) pf AE (X B ®{Z$® X E ) . (9) 

The qubit A is sent back to Bob after the encoding operation. Eve's task is to discriminate 
between states p^ AE = {^Pvbae) with maximal confidence. The system states after Bob's 
reception of qubit A traveling back from Alice and in the absence of Eve measurements are 
given by 

Pvbae = Wba ® Te) P^bae, (10) 
so Bob has to distinguish the states 

P»ba = ^e(p^ae) ■ (11) 

When Eve performs measurements, the same quantum discrimination strategy is used but 
Bob is unconscious that measured states are of the form 

_ ( 4 ) -TV l(\f to t \ M <*,EpJ§ AE M a , E | 

- i)c E {NbA®X E ) ~, 7-7 r- • (12) 

^ [p^ AE M a>Ej 

The analysis of the protocol should determine Eve's information gain I B and the probability 
of erroneous Bob's decoding QBER as functions of probability of error observed in control 
mode Pec an d, optionally, parameters describing noise operator N . 



3 Model of the noise 



Any interaction with the environment observed from the perspective of the principal system 
can be given as operator sum (Kraus) representation [101 [3] 

p^ p> =Np = Y J K k pKl (13) 

k 

provided that ^ fc K^K^ = X. Such an approach hides the details of the interaction of the system 
under investigation with the environment, but these details are not of immediate relevance 
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in analysis of many quantum information processing related tasks. In such situations Kraus 
representation proved to be useful because it provides a unified description of many, seemingly 
different, physical processes. 

It follows from the description of the protocol operation that the signal qubit only interacts 
with the environment. If that qubit was separated from the home qubit possessed by Bob, 
the noise operator would be simply decomposed as Mb A = <8> Ma, where Ma describes the 
interaction of the signal qubit with the environment. However, the signal and home qubits are 
maximally entangled in the ping-pong protocol and such decomposition is not obvious. In this 
section we introduce a general procedure for deriving Kraus operator for such a situation and 
exemplify it with the depolarizing channel. 



The action of the quantum channel ( 13 ) can be represented as a supermatrix J% j9j Eq. (5)] 

i K k Res (p) = M N Res (p) , 



Res (//) = Res (K k pK, 



k 



(14) 



where Res (•) denotes reshape transformation which maps a density matrix into a column vector 
row wise. The Kraus operators can be recovered from M/v with singular matrix decomposition 
of the matrix Dj^ which is related to Mj\f via 

k,i 



Mm 



e i, 



(15) 



where et denotes fc-th element of the canonical base of p space [9| . When two quantum channels 
Mb and Ma are applied to the parts of the composite system the supermatrix of the composite 
channel can be found as 

M Nb ® Na = M R {M B ® M A )M R , (16) 

where Mr is the matrix representing the change of base in the product space and it is commonly 
called the reshuffle matrix [3 [1] . In the considered case Mb = %B and our task is to derive 
Kraus operators for Mx b ®n a an d subsequently a map for density operators analogous to (13). 

The single qubit depolarizing channel with reliability r, which is commonly used to model 
white noise, is described by the map [10] 



mFXpa) 



rpA + 



1 



fe=0 



VkPACk 



where a k are Pauli matrices. The supermatrix of this map is given as 

o o 



M 



(D) 



Ma 




(17) 



(18) 



Using the formula (16), one gets the explicit form of the supermatrix for the extended channel 
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Kraus operators for the above extended channel can be obtained using eigendecomposition of 



the dynamical matrix (15) corresponding to the supermatrix Mj- 



(D) 



K 



(D) 

X B ®N A 



VI - r y/l-r 
— - — X B ®a z , 1 B 



o 11 
.0 o J 



V2 



0J > 



T B ®T A 



(20) 



Kraus representation ( 20 ) implies that the action of the extended channel on the second sub- 



system is independent from the action on the first subsystem. Using the representation of the 
composite system density matrix 



Pba 



Po b °a,°bOa Po b o a ,o b i a />o s o a ,i s o a P0 B A ,1 B 1 A 
P° B 1a,° B °a Po b i a ,o b i a P0 B 1 A ,1 B A P0 B 1 A ,1 B 1 A 
P1 B °A,° B A Pl B A ,° B lA P1bO A >1-B°A ftfllA.lBlA 
PlBl A ,°B°A WfllA.OfllA PlBlA>lB°A P^B^A^B^A 



= Y, [Tr AP BA] mn \m B )(n B \ ® ( p— 

m,n={0,l} 

one can show that it implies the following map 

NbaPba = (%b ® .A/a) Pba = t Pba + : 



Pm B 0A,n B 0A Pm B 0A,n B lA 
Pm B l A ,n B 0A Pm B lA,n B lA 



Tr A (p 



BAJ 



>1 A . 



(21) 



(22) 



4 Passive eavesdropping in a noisy channel 

As the application of the introduced description, we consider a simple model of quantum noise 
described by the depolarizing channel. Let us consider the situation in which Eve does not 
entangle with a signal qubit i.e. £ae = Iae- Such assumption results in the separation of 
the system controlled by Eve, so it is not taken into account in further expressions. From the 



map ( 22 ) it follows that the system state after the reception of the signal qubit by Alice reads 
Pba = \ [\0b0a)(1b1a\ + |1b1a)(0 b 0a|] + 



+ 



1 — r 



[|1b0a)(1b0a| + |0b1a)<0b1a|] + 



+ [|0b0a>(0b0a| + |1b1a>(1b1a|] • (23) 
It follows from Q that the probability of error occurrence in control mode is equal to 

Pec = (1 - 0/2- (24) 
In the information mode the encoding operation leads to states 

Puba = ("i)^ [|0b0a)(1bU| + |1b1a)(0b0a|] + 



+ 



1 — r 



[|1b0a)(1b0a| + |0b1a)(0b1a|] + 



+ [|0b0a)(0b0a| + |1b1a>(1b1a| 



(25) 



However, Eve's observation capabilities are limited only to travelling qubit A, thus she has to 
distinguish between states pjj^ = Trg {pJs'a) • But P^A = P^A anc ^' m consequence, Ie = 0. 
Thus the noise gives no additional advantage to passively eavesdropping Eve. 
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Figure 1: Probabilities of a particle loss (QLOSS) or an erroneous decoding (QBER) as a func- 
tion of control mode failure probability (Pec) i n protocol operation over depolarizing channel. 



The qubit A in its way back to Bob again interacts with the environment so he receives the 
states 

Pt^BA = rPvBA + (p^ba) ®%a = 

2 

= (-!) M y [|0 B a )(1bU| + |1b1a)<0 b (U|] + 
1 -r 2 

+ —— [\1 b 0a)(1b0a\ + |0 b 1 a )(0bU|] + 



+ 



1 + r 2 



[\0b0a){0b0a\ + |1 b 1a)(1bU|] • (26) 



If Bob uses unambiguous discrimination, the bits are lost (measurement fails) with a prob- 
ability [6j 

' (27) 



QLOSS = 1 - Pr x = F ( po$ A , pigi ) , 



where the overlap of pJ~g A is given by 

F (p&Pi { ba) = ~(1 " r 2 ) + \^(l-r 2 )(l + ^). 



(28) 



On the other hand, if Bob uses minimum error discrimination the observed bit error rate is 
equal to [I] 

(29) 



QBER=U 



P^A-P^a\) )=(l-r 2 )/2. 



Quantities QBER and QLOSS as a function of control mode failure probability ([8]), which is 
a parameter directly accessible to communicating parties, are shown in Figure [TJ Both QBER 
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and QLOSS do not scale linearly with Pec- Moreover, the functional form of the obtained 
scaling heavily depends on the parameters of the noise model used, thus the correct modeling 
of noise is of prime importance in the estimation of the protocol operation over non-perfect 
quantum channels. 

5 Concluding remarks 

The usefulness of the general method based on density operator analysis for ping-pong protocol 
operation has been presented. As the proof of concept the example of its application to the 
analysis of the protocol execution over depolarizing channel has been given. The analysis 
of a more complicated case of an active eavesdropping is left for future research. Although 
the method is more cumbersome than the approach used so far, it is more versatile as it permits 
an incorporation of different models of noise in a unified way and makes use of a well grounded 
theory of quantum discrimination in estimation of eavesdropper's information gain. 
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